Re: FTP userid propagation



On 1/5/2006 9:57 AM, Lester, Bob wrote:

     This does sound a lot better that the .netrc approach (which we've been using).  Can you point me to the relevent manuals?  Redbooks?


What level of info do you need? If you're already using digital certificates then you have some basic info and infrastructure setup already.


If you're not using them, then
(a) you should be; but
(b) you'll need to do a lot more reading and experimenting.

Some information sources that should help:
(a) RACF Security Administrator's Guide chapter 21, at http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ICHZA760/21.0?SHELF=EZ2ZO10F&DT=20050713233738 or http://makeashorterlink.com/?P44925C6C


(b) z/OS PKI Services Guide and Reference (you may not need to use PKI Services, but there's also some good background info in this book) at http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IKYZA140/CCONTENTS?SHELF=EZ2ZO10F&DN=SA22-7693-06&DT=20050709135510 or http://makeashorterlink.com/?X1DD242AB

(c) The RACF Presentations page at http://www-03.ibm.com/servers/eserver/zseries/zos/racf/presentations.html where you will find presentations on RACF and the Digital Certificate and some on security for z/OS Communications Server

(d) The z/OS Communications Server IP Configuration Guide and Reference books:

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B350/CCONTENTS?SHELF=EZ2ZO10F&DN=SC31-8775-07&DT=20050708113621 or http://makeashorterlink.com/?N25921C6C
and
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B450/CCONTENTS?SHELF=EZ2ZO10F&DN=SC31-8776-08&DT=20050707162049 or http://makeashorterlink.com/?J16962C6C


(e) The z/OS Communications Server IP User's Guide and Commands, at http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/F1A1B950/CCONTENTS?SHELF=EZ2ZO10F&DN=SC31-8780-05&DT=20050708142126 or http://makeashorterlink.com/?B47932C6C

	Walt Farrell, CISSP
	z/OS Security Design, IBM

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
.



Relevant Pages

  • Wireless WPA on SBS not authenticating
    ... I am trying to configure an Cisco 1200AP and a Linksys WRT54G to work with ... It was a great guide and helped immensly with my implementation. ... GPO consisting of Autoenrollment for "Computer" Certificates ... I can see on a client machine that the cert is there and it is the correct ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 / IAS & wireless access
    ... Hi Aart. ... likely due the clients or workstations not having appropriate certificates, ... you have a link for the guide you've followed? ...
    (microsoft.public.windows.server.sbs)
  • Help regarding programatically generating CSR
    ... I'm a newbie to certificates and I could not find a newgroup related to this ... please help or guide me to a newsgroup where this could be answered. ... In IIS there's an option to manage web server certificates. ... to set it to 2048 and 4096 just like it is configurable in IIS wizard. ...
    (microsoft.public.dotnet.general)
  • RE: Biztalk certificates
    ... > user account that the BizTalk service runs under. ... > To get access you can either log off and then run the certificates MMC ... > 2004 Help guide. ... >> How can I install certificates in Biztalk? ...
    (microsoft.public.biztalk.general)